$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: MzYYg2DoLbK60nOzNn+yFGcMd5oPvalSYwtopqsoGTs= Subject key identifier: 43:CC:5F:A9:0D:27:65:06:AC:C8:1A:D8:46:D2:8D:8C:C5:45:4D:C2 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 06243123A687C8FD46E70C23D8DABBEE78D10401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 0143 Signing time: Mon 02 Mar 2026 01:40:44 +0000 Manifest this update: Mon 02 Mar 2026 01:35:44 +0000 Manifest next update: Thu 05 Mar 2026 06:33:44 +0000 Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=) 2: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: FwYrcBpvjNibEEJM7MWNiTtlhMrhRih+DO8E0VD650Y=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:24:31:23:a6:87:c8:fd:46:e7:0c:23:d8:da:bb:ee:78:d1:04:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Mar 2 01:35:44 2026 GMT Not After : Mar 5 06:33:44 2026 GMT Subject: CN=43CC5FA90D276506ACC81AD846D28D8CC5454DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:2d:72:26:85:29:ea:34:84:8c:9a:1e:e1: 5f:3f:83:d5:08:ce:5f:14:70:59:7b:e1:85:c0:bd: 71:3b:12:c2:67:e5:df:3d:c5:63:2d:fd:a6:df:88: d8:63:99:43:18:5b:90:79:17:1f:a1:6b:39:a1:7c: 39:ae:60:0d:5d:b4:c1:ce:de:02:fc:1a:94:67:7a: e4:55:4f:97:48:15:78:e0:4f:0f:ee:1d:44:7a:2f: 89:c5:6b:2b:a1:e1:e6:b7:0c:0a:51:de:ea:20:0d: 7a:60:9e:fa:da:37:c7:3f:62:85:ec:52:8d:62:9e: 49:dd:6b:a8:38:88:4c:6b:2c:e6:2c:ef:ef:e1:29: b6:3d:3b:5a:a9:7b:ca:77:57:a5:4f:cd:1b:3a:76: 71:d8:b8:eb:f4:4b:46:81:5c:aa:5b:92:11:d6:f7: 3c:c5:4e:41:0c:1f:1d:15:7e:4b:1e:51:c7:8f:55: 45:6c:9d:ba:7e:82:1e:fa:6e:d6:40:fa:c8:e6:e1: 14:8a:1f:51:ea:30:ea:1b:f3:47:92:18:3e:51:6e: 79:ea:2b:71:16:15:29:97:d0:50:f8:a9:3c:b5:84: f0:54:cd:4b:81:a9:34:a9:4b:1e:ae:35:52:b4:84: af:d9:ef:ea:fa:57:0c:c0:a2:be:42:f0:7f:6c:e5: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:5F:A9:0D:27:65:06:AC:C8:1A:D8:46:D2:8D:8C:C5:45:4D:C2 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:37:47:cc:7d:04:5f:00:4a:a6:64:bc:55:95:a7:1f:6d: 7a:52:ce:66:01:47:95:f5:3a:9e:29:5c:c0:66:d4:98:0f:42: 79:c7:5f:be:2f:37:06:bd:7c:c0:43:89:f3:60:5a:71:52:16: 8f:4f:86:8d:db:0a:9e:cb:6a:71:1b:89:62:69:b8:48:aa:3a: 90:8c:36:34:88:6e:22:e3:93:0b:a4:20:d5:f0:96:b7:9f:7e: 92:10:43:cb:28:2c:40:d2:32:5e:ab:1b:0d:1b:88:8c:b3:ca: 1a:0c:7b:70:da:fa:59:1b:05:99:62:ce:72:85:5b:38:e2:09: 5a:d2:85:75:dc:4d:14:a1:bf:c0:0a:e4:4f:19:db:97:09:19: 5c:80:b4:7e:d4:96:ee:b9:d9:18:5b:9a:ab:bc:a1:f0:d8:97: f8:f0:fc:45:74:0b:dc:5b:85:a1:e8:2d:71:72:02:53:4f:a5: 05:9f:41:f9:dd:bc:2a:2c:5b:28:4b:d0:9e:97:67:54:a8:85: 36:8a:e3:5e:98:90:98:e2:e7:29:d5:14:e9:3a:a5:85:fb:1c: 14:88:e2:58:e0:11:e0:f2:99:b2:b3:3f:9a:5d:62:da:93:3e: 6a:57:07:80:24:2b:e3:94:9a:89:45:7f:80:60:ba:76:6f:a1: 81:f2:72:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiQxI6aHyP1G5wwj2Nq77njRBAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNjAzMDIwMTM1NDRaFw0yNjAzMDUwNjMzNDRaMDMxMTAvBgNV BAMTKDQzQ0M1RkE5MEQyNzY1MDZBQ0M4MUFEODQ2RDI4RDhDQzU0NTREQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpi1yJoUp6jSEjJoe4V8/g9UI zl8UcFl74YXAvXE7EsJn5d89xWMt/abfiNhjmUMYW5B5Fx+hazmhfDmuYA1dtMHO 3gL8GpRneuRVT5dIFXjgTw/uHUR6L4nFayuh4ea3DApR3uogDXpgnvraN8c/YoXs Uo1inknda6g4iExrLOYs7+/hKbY9O1qpe8p3V6VPzRs6dnHYuOv0S0aBXKpbkhHW 9zzFTkEMHx0VfkseUcePVUVsnbp+gh76btZA+sjm4RSKH1HqMOob80eSGD5Rbnnq K3EWFSmX0FD4qTy1hPBUzUuBqTSpSx6uNVK0hK/Z7+r6VwzAor5C8H9s5dVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8xfqQ0nZQasyBrYRtKNjMVFTcIwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDsN0fMfQRfAEqmZLxVlacfbXpSzmYBR5X1 Op4pXMBm1JgPQnnHX74vNwa9fMBDifNgWnFSFo9Pho3bCp7LanEbiWJpuEiqOpCM NjSIbiLjkwukINXwlreffpIQQ8soLEDSMl6rGw0biIyzyhoMe3Da+lkbBZliznKF WzjiCVrShXXcTRShv8AK5E8Z25cJGVyAtH7Ulu652Rhbmqu8ofDYl/jw/EV0C9xb haHoLXFyAlNPpQWfQfndvCosWyhL0J6XZ1SohTaK416YkJji5ynVFOk6pYX7HBSI 4ljgEeDymbKzP5pdYtqTPmpXB4AkK+OUmolFf4BgunZvoYHycug= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:22 2026 by rpki-client